Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: e/8m9xUwKtMfuGq/lHlAWBLYbbHGxGv6E2VcX2HObK4=
Subject key identifier: 10:06:8E:28:01:34:31:3A:6E:FF:83:76:B8:64:E3:FA:C0:67:6E:D0
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 0194BC3C80F01F13BB5F7CA09DEA1C848701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 0302
Signing time: Fri 31 Jan 2025 12:01:09 +0000
Manifest this update: Fri 31 Jan 2025 12:01:09 +0000
Manifest next update: Sat 01 Feb 2025 12:01:09 +0000
Files and hashes: 1: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: WFMJFu1Vv8RjCDkRN1dYb+0f7dPkBovqaSiZ7liY/Mc=)
2: yOFjl_Pxx0Rc441XIFCRbQAh0C8.roa (hash: xKAfXgoPQJ/4slkyXjKOtsYsgtyUmgpiHM6n61mT42s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:80:f0:1f:13:bb:5f:7c:a0:9d:ea:1c:84:87:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Jan 31 12:01:09 2025 GMT
Not After : Feb 1 12:01:09 2025 GMT
Subject: CN=10068e280134313a6eff8376b864e3fac0676ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:bc:63:79:1f:21:02:f4:2c:b4:3a:7c:1f:
07:c9:41:5d:02:85:01:2c:ea:f8:a5:5b:44:a0:9d:
e8:1b:0a:b7:ec:82:fb:a6:31:10:3b:3d:62:16:d1:
8b:92:d2:a1:ed:23:57:82:80:25:bb:4a:04:b0:33:
a5:f7:5a:68:3c:04:31:ad:f3:68:71:9b:1d:6b:e0:
43:46:21:93:7d:46:ce:41:f9:77:0b:f8:56:b7:93:
c7:c0:65:70:8a:a0:e4:a8:c7:3e:96:f6:e6:8a:77:
09:90:df:78:65:6f:1a:ba:a1:6b:bc:43:1f:43:5c:
7c:79:94:be:cd:e8:f9:44:15:e1:8e:b8:a3:16:56:
ae:80:b9:93:db:77:7e:06:da:0e:6f:b3:c4:33:1d:
89:f7:74:82:a9:17:f8:57:92:8b:52:79:b8:57:bb:
da:ff:9c:e6:ab:ae:e7:75:e9:55:d3:90:b8:5c:28:
86:6a:b3:b3:6f:13:75:d3:b7:f8:1c:07:5c:15:e5:
6b:77:4f:fc:87:14:34:ab:cc:0e:8c:b8:ca:a3:02:
cc:4a:dd:46:13:72:71:90:1a:11:3b:01:c6:1b:94:
c8:a8:b5:aa:12:a2:0e:f3:8f:77:4b:78:f1:b4:9a:
aa:06:38:91:72:dd:84:99:a2:37:d3:db:fa:ab:ea:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:06:8E:28:01:34:31:3A:6E:FF:83:76:B8:64:E3:FA:C0:67:6E:D0
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d8:4d:31:b0:b5:57:37:e0:f6:0d:7d:65:a2:6b:c4:9c:a7:
29:56:f8:f9:ac:c3:5f:6e:57:0d:80:0f:fa:d4:b6:df:a5:1e:
27:59:5f:37:2f:ad:51:4b:87:14:0d:a5:39:d8:78:1d:30:33:
10:d8:59:51:b6:e1:2d:8c:d8:d7:35:ed:b7:f7:d9:a2:32:cd:
56:ed:06:39:23:5a:38:04:8e:2c:c7:9d:49:d1:b4:75:be:f4:
7e:5c:18:02:6b:37:85:d2:1d:c1:39:ca:cd:f8:88:f0:c9:0d:
6d:bf:88:4e:8f:d7:9f:c9:61:d9:cd:9d:41:b9:bf:c7:e1:f2:
16:aa:fe:44:22:1e:7b:09:98:6d:07:db:4b:3e:c1:b9:ce:0f:
bd:14:98:bf:75:04:23:b0:80:b4:8e:e3:3c:fb:14:0f:2b:bd:
87:6b:d1:bb:e9:48:3e:5a:4b:c0:77:7a:4f:e7:77:1c:c1:b4:
05:0a:93:23:19:ee:e7:9c:fd:74:f9:01:ff:81:e2:ee:3f:bc:
84:da:37:64:19:fb:33:27:f4:c0:cd:83:0a:e1:a8:df:e2:44:
e2:37:9c:bc:e8:20:47:f3:39:ca:30:8a:04:db:ee:e4:12:fa:
50:11:4c:e7:5d:bb:10:25:b9:ee:f1:41:6f:f6:e1:41:b8:3e:
c1:65:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:56 2025 by rpki-client